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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

In re Patent Application of 

SHIPP,A. Atty. Ref.: 117-515 

Serial No. To be assigned TC/A.U.: 

Filed: July 8, 2004 Examiner: 

For: METHOD OF, AND SYSTEM FOR, HEURISTICALLY DETECTING 
VIRUSES IN EXECUTABLE CODE 

July 8, 2004 

Commissioner for Patents 

P.O. Box 1450 

Alexandria, VA 22313-1450 

Sir: 

INFORMATION DISCLOSURE STATEMENT 

As suggested by 37 C.F.R. 1.97, the undersigned attorney brings to the attention of 
the Patent and Trademark Office the references Usted on the attached form PTO-1449. 
I I All listed documents are attached. 

n This application was filed after June 30, 2003 so that copies of U.S. Patent 
Publications are not required and are not attached. 

13 Listed foreign patent publications and other documents are enclosed. 

[3 The listed documents were cited in the ISR and copies should have been 
suppUed by WIPO directly to the US PTO. If copies are not timely received from WIPO, 
please telephone the undersigned so that copies can be timely supplied for the Examiner's 
consideration in this US National Phase AppUcation. 

This is not to be construed as a representation that a search has been made or that 
no better prior art exists, or that a reference is relevant merely because cited. 

The Examiner is requested to initial the attached form PTO-1449 and to return a 
copy of the initialed document to the undersigned as an indication that the listed 
references have been considered and made of record. 
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Respectfully suDrmttea, 
NIXON & VANDERHYE P.C. 



By: 




Arthur R, Crawford 
Reg. No. 25,327 



ARC:ecb 

1 100 North Glebe Road, 8th Floor 
Arlington, VA 22201-4714 
Telephone: (703) 816-4000 
Facsimile: (703) 816-4100 
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(Use several sheets if necessary) 



\ DOCKET NO. 

515 



To i^^ssigned 



APPLICANT 

SHIPP, A. 



FILING DATE 

July 8, 2004 



TC/A.U. 



U.S. PATENT DOCUMENTS 



^EXAMINER 
INITIAL 



DOCUMENT NUMBER 



DATE 



NAME 



CLASS 



FILING DATE 
SUBCLASS IF APPROPRIATE 



FOREIGN PATENT DOCUMENTS 



DOCUMENT 



DATE 



COUNTRY 



CLASS SUBCLASS 



TRANSLATION 
YES NO 







02/33525 A2 


04/2002 


WO 









































































































































OTHER DOCUMENTS (including Author, Title, Date, Pertinent pages, etc.) 



NACHENBERG; "A NEW TECHNIQUE FOR DETECTING POLYMORPHIC COMPUTER VIRUSES. A THESIS 
SUBMITTED IN PARTIAL SATISFACTION OF THE REQUIREMENTS FOR THE DEGREE MASTER OF 
SCIENCE IN COMPUTER SCIENCE AND ENGINEERING"; Thesis University of California. XX, XX, 1995, pages I- 

V, 1-127, XP000197628. 



IBM Technical Disclosure Bulletin, April 1990, "SYSTEM FOR DETECTING UNDESIRED ALTERATION OF 

SOFTWARE". 



Elsevier, Computers and Security, vol. 15, no. 7, 1996, BONTCHEV; "POSSIBLE MACRO VIRUS ATTACKS AND 
HOW TO PREVENT THEM"; pages 595 - 626, see section 2.2.1. 



Proceedings of the second international virus bulletin conference", 2-3 September 1992, pages 1-14, HRUSKA; "VIRUS 
STRUCTURE"; see sectionl.l and figure 5. 



*Examiner 



Date Considered 



Examiner: Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not In conformance and not considered. Include 
copy of this form with next communication to application. 
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